CVE-2021-24525

creationtimestamp| type| source ---|---|--- 2021-09-20 14:27:00+00:00| seen| https://t.me/cibsecurity/29096...

CVE-2021-24525

CVE-2021-24525 concerns the WordPress plugin Shortcodes Ultimate (before 5.10.2). The vulnerability allows users with the Contributor role to perform stored XSS via shortcode attributes due to inconsistent handling/escaping of attributes (some are escaped, many are not; some attributes may be ins...